Formbrowser giving "Error sending: XSS attempt"

[janvl]

Hi,
i have made a form with formbuilder to make a repair ticket (a take-in, with dates and status).
This is functional, no problems.

I made a formbrowser template for the frontend (secured the page with MAMS), very simple, to view / edit / delete form-entries.
If i use the edit (or view) function the first time after a day or two it works, i can change fields and save.
If i use it the second time i get : Fehler beim Versand: XSS attempt! (in english - Error sending: XSS attempt).

I know the formbrowser has not been updated which would be very nice if it was, for formbuilder and formbrowser
were a kind of twin-programs offering an easy way to save data-entries and to view / edit / delete them.
Is there a way to correct this with formbrowser or is there another idea where i can make data-entry (a form) and
give the user of the frontend through a secure page (MAMS) the ability to view / edit / delete entries?

Kind regards,
Jan

[DIGI3]

This is a known issue with FormBuilder but there's not too much you can do until it gets addressed. Some people have had luck by adding a csrf token:
http://dev.cmsmadesimple.org/bug/view/12673
I've also been hoping for a feature to disable the checking as it's made the module mostly unusable for me:
http://dev.cmsmadesimple.org/feature_request/view/12575

If you want an alternate option, SmartFormsAccess is a CRUD for SmartForms, it's a bit more complex but has some interesting abilities. It does have a few of its own bugs though.

[Jo Morg]

If it is a ticket system you need you may want to check this one: http://dev.cmsmadesimple.org/projects/supporttickets. It is integrated with MAMS already. It's a fork of the old CG one. There are no files released yet but it has been pretty stable on my tests, I can send you a beta for you to test, if you want to. It should be ready to be released I just have forgotten it as I have been really busy. Send me a PM if you want to test it.

[janvl]

Hi,

I found in the files of formbuilder -

fb_cnf_sample.inc

in there is a command:
$fbcfg['prevent_xss_check'] = FALSE;

How can i have Formbuilder accept a value of TRUE for this?
Do i need to save the changed file as "fb_cnf.inc" ?

[edit]
I did so and it seems to work!


Regards,
Jan